383dd2d80c3e34d32e0126837e104df61dd94b9329a7e3880f1971fb2f6bbacb
- SHA256 383dd2d80c3e34d32e0126837e104df61dd94b9329a7e3880f1971fb2f6bbacb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
install.2.0.14.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
install.2.0.14.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target 383dd2d80c3e34d32e0126837e104df61dd94b9329a7e3880f1971fb2f6bbacb
- Size 3.1MB
- Sample261020-le7bcsbz2q
- SHA256 383dd2d80c3e34d32e0126837e104df61dd94b9329a7e3880f1971fb2f6bbacb
- MD5 bbd69b20510e27b07276d05a918fb28c
- SHA1 46433243cf6828656fd08fde829bf58cdf8799a7
- SHA512 c9f6be1a84237a879c094d1697502a73a3d16275bb5f548272300e18859d504c558c3521c57d9310012de62300165894ab9abd825121491d230231f94dbda68c
- SSDEEP 98304:r2G4IAgqPzxu7Jcb08qGO8OMwgWwddcyUyv:TSPs7JcA8qGO8OhgP/c9yv
- TLSH T124E5335D9D718856E62E561CD290A85A6B7D9234EF400FFE80F663FF9F436CE3018A42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/install.2.0.14.exe
File Explorer
-
383dd2d80c3e34d32e0126837e104df61dd94b9329a7e3880f1971fb2f6bbacb.zip 3.1MB
-
install.2.0.14.exe.exe 34.6MB
install.2.0.14.exe
- IMPHASH d9f7ada62e9cb2a23a751d4fc98f44ea
- SHA256 d3c58b152c2103c3aea56391f3562113ab379c8a963bde1fd0faaab0c4ee75fc
- MD5 add6d88b6d8b4ad3086de9c1257d3d7c
- SHA1 1cc4deda2789e8c5a74339b4649a14b81e74f857
- SHA512 373d8a2b77e00087003d4ecf908e970e961408d648082a902eab390669b653b6a27f956b62bbc6cbf3aefec97f987d1f55eddf477f054a602376a1ef1cfeb555
- SSDEEP 98304:h6ukQmHTpksa7ffG6slKxMzfM3nJ76KVfMYrvjgAY:gukQmH0HmKxofM3nl6UfMYrLgAY
- TLSH T1D0876F22B6428CD2F00285F45897BBA427FEFCB18AD1C71336E95B1E6FAE18C8D57055
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
133256
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
AllowSetForegroundWindow
shell32
CommandLineToArgvW
kernel32
SetEndOfFile
WriteConsoleW
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
HeapReAlloc
GetCurrentDirectoryW
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
HeapAlloc
HeapFree
SetEnvironmentVariableW
CloseHandle
GetLastError
WaitForSingleObject
LoadLibraryExW
GetCurrentProcessId
GetCurrentThreadId
GetLocalTime
FreeLibrary
GetModuleHandleExW
GetProcAddress
LoadLibraryW
LocalFree
FormatMessageW
CreateFileW
FindClose
FindNextFileW
GetFileAttributesW
SetLastError
GetCommandLineW
GetExitCodeProcess
CreateProcessW
SetDllDirectoryW
GetEnvironmentVariableW
GetSystemDirectoryW
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
RtlUnwind
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
GetCommandLineA
RtlPcToFileHeader
RaiseException
RtlUnwindEx
GetFullPathNameW
GetDriveTypeW
ExitProcess
VirtualAlloc
WriteFile
jvmLauncherGetAPI
Name
.text
Size
279KB
Virtual Size
278KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
106KB
Virtual Size
106KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
34.1MB
Virtual Size
34.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
148B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
150KB
Virtual Size
150KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=260, version=26715,
count=12, id=259, version=26715,
count=178, id=261, version=26715,
count=13, id=257, version=26715,
count=150, id=1, productName=Unmarked objects,
count=16, id=260, version=28920,
count=10, id=259, version=28920,
count=82, id=261, version=28920,
count=1, id=260, productName=VS2019 v16.7.5 build 29112, version=29112,
count=19, id=261, productName=VS2019 v16.7.5 build 29112, version=29112,
count=1, id=256, productName=VS2019 v16.7.5 build 29112, version=29112,
count=1, id=255, productName=VS2019 v16.7.5 build 29112, version=29112,
count=1, id=258, productName=VS2019 v16.7.5 build 29112, version=29112,